Tenda

Records1964All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical648CVSS 9.0–10.0

CVSS high1091CVSS 7.0–8.9

Exploited now

Tenda records in CISA KEV

TI-2018-10434 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2020-08863 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-11772 Tenda AC11 Router Stack Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Ac6 Firmware 108 records HIGH Ac18 Firmware 103 records HIGH Ac10 Firmware 92 records CRITICAL Ac9 Firmware 92 records CRITICAL Ac15 Firmware 85 records CRITICAL Ac7 Firmware 72 records CRITICAL Fh1202 Firmware 63 records HIGH W30e Firmware 63 records HIGH

Records

85 records in Ac15 Firmware · all components

TI-2020-08863 CVE-2020-10987 · GHSA-r3xc-9hm9-gf29

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote…

CRITICAL 100KEV

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.7981 Published 2020-07-13 No fix listed CWE-78

TI-2026-19426 CVE-2026-24105 · GHSA-r2xx-c2qg-8hph

An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi.

HIGH 82

An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01978 Published 2026-03-02 No fix listed CWE-94

TI-2026-19425 CVE-2026-24103 · GHSA-975v-vmhm-3frh

A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi.

HIGH 82

A buffer overflow vulnerability was discovered in goform/formSetMacFilterCfg in Tenda AC15V1.0 V15.03.05.18_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00484 Published 2026-03-03 No fix listed CWE-120

TI-2026-19424 CVE-2026-24101 · GHSA-mcv3-6wfv-rv64

An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi.

HIGH 82

An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0194 Published 2026-03-02 No fix listed CWE-78

TI-2025-21094 CVE-2025-29462 · GHSA-chv8-32cq-8ghq

A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13.

HIGH 82

A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00575 Published 2025-04-03 No fix listed CWE-120

TI-2025-19077 CVE-2025-25632 · GHSA-cg3h-9f75-2rjp

Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet.

HIGH 82

Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01711 Published 2025-03-05 No fix listed CWE-77

TI-2023-14250 CVE-2023-30373 · GHSA-rfj4-7g32-cpqh

In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability.

HIGH 82

In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00845 Published 2023-04-24 No fix listed CWE-787

TI-2023-14249 CVE-2023-30372 · GHSA-47mh-6hjv-3484

In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability.

HIGH 82

In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00845 Published 2023-04-24 No fix listed CWE-787

TI-2023-14247 CVE-2023-30370 · GHSA-wg94-qv5w-pwh4

In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability.

HIGH 82

In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00845 Published 2023-04-24 No fix listed CWE-787

TI-2022-19440 CVE-2022-40851 · GHSA-9vv6-62qf-hh55

Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat.

HIGH 82

Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.099 Published 2022-09-23 No fix listed CWE-787

TI-2024-02665 CVE-2024-2855 · GHSA-5q2w-46cp-3v4g

Tenda AC15 SetSysTimeCfg fromSetSysTime stack-based overflow

HIGH 76

A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.05.19/15.03.20.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01298 Published 2024-03-24 No fix listed CWE-121

TI-2024-02661 CVE-2024-2851 · GHSA-67h4-mrpp-g64j

Tenda AC15 setsambacfg formSetSambaConf os command injection

HIGH 76

A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04009 Published 2024-03-24 No fix listed CWE-78

TI-2024-02660 CVE-2024-2850 · GHSA-9qjx-ghvx-68j3

Tenda AC15 saveParentControlInfo stack-based overflow

HIGH 76

A vulnerability was found in Tenda AC15 15.03.05.18 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01298 Published 2024-03-24 No fix listed CWE-121

TI-2024-02625 CVE-2024-2815 · GHSA-3vpm-jqjj-f248

Tenda AC15 Cookie execCommand R7WebsSecurityHandler stack-based overflow

HIGH 76

A vulnerability classified as critical has been found in Tenda AC15 15.03.20_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01315 Published 2024-03-22 No fix listed CWE-121

TI-2024-02624 CVE-2024-2814 · GHSA-335h-mvpr-rccp

Tenda AC15 DhcpListClient fromDhcpListClient stack-based overflow

HIGH 76

A vulnerability was found in Tenda AC15 15.03.20_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01315 Published 2024-03-22 No fix listed CWE-121

TI-2024-02623 CVE-2024-2813 · GHSA-r9c9-3f78-4c7m

Tenda AC15 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow

HIGH 76

A vulnerability was found in Tenda AC15 15.03.20_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01315 Published 2024-03-22 No fix listed CWE-121

TI-2024-02620 CVE-2024-2810 · GHSA-cm7x-f2pr-p24p

Tenda AC15 WifiWpsOOB formWifiWpsOOB stack-based overflow

HIGH 76

A vulnerability has been found in Tenda AC15 15.03.05.18/15.03.20_multi and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01315 Published 2024-03-22 No fix listed CWE-121

TI-2024-02619 CVE-2024-2809 · GHSA-p66f-379f-mm3c

Tenda AC15 SetFirewallCfg formSetFirewallCfg stack-based overflow

HIGH 76

A vulnerability, which was classified as critical, was found in Tenda AC15 15.03.05.18/15.03.20_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01918 Published 2024-03-22 No fix listed CWE-121

TI-2024-02618 CVE-2024-2808 · GHSA-3qpw-mwvv-hvxg

Tenda AC15 QuickIndex formQuickIndex stack-based overflow

HIGH 76

A vulnerability, which was classified as critical, has been found in Tenda AC15 15.03.05.18/15.03.20_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01372 Published 2024-03-22 No fix listed CWE-121

TI-2024-02617 CVE-2024-2807 · GHSA-5wpm-59m4-cxh5

Tenda AC15 expandDlnaFile formExpandDlnaFile stack-based overflow

HIGH 76

A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.20_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01372 Published 2024-03-22 No fix listed CWE-121

TI-2024-02616 CVE-2024-2806 · GHSA-qm77-8xm2-w572

Tenda AC15 addWifiMacFilter stack-based overflow

HIGH 76

A vulnerability classified as critical has been found in Tenda AC15 15.03.05.18/15.03.20_multi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01315 Published 2024-03-22 No fix listed CWE-121

TI-2024-02621 CVE-2024-2811 · GHSA-7qj4-xv62-vj42

Tenda AC15 WifiWpsStart formWifiWpsStart stack-based overflow

HIGH 75

A vulnerability was found in Tenda AC15 15.03.20_multi and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01541 Published 2024-03-22 No fix listed CWE-121

TI-2026-05109 CVE-2026-5830 · GHSA-3hw6-fxjg-9c93

Tenda AC15 SysToolChangePwd websGetVar stack-based overflow

HIGH 73

A vulnerability was identified in Tenda AC15 15.03.05.18.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00638 Published 2026-04-09 No fix listed CWE-119

TI-2026-04336 CVE-2026-4975 · GHSA-w366-ww4p-hrpq

Tenda AC15 POST Request setcfm formSetCfm memory corruption

HIGH 73

A vulnerability has been found in Tenda AC15 15.03.05.19.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00644 Published 2026-03-27 No fix listed CWE-119

TI-2026-02935 CVE-2026-3400 · GHSA-mx33-f7v7-3fmw

Tenda AC15 TextEditingConversion stack-based overflow

HIGH 73

A security flaw has been discovered in Tenda AC15 up to 15.13.07.13.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00978 Published 2026-03-01 No fix listed CWE-119

Open these records in search →

Critical	648
High	1091
Medium	217
Low	8
No CVSS	0